Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7afae497-a3f6-4f52-abeb-632cca8db94a/9916c0f3-dcb9-3d6b-b1d1-bd73c842be2e.roa
File:                     9916c0f3-dcb9-3d6b-b1d1-bd73c842be2e.roa (raw, json)
Hash identifier:          /O7J3mKghDF7CX7QoMOgTDg+L64DzjToweYMKkyU9xI=
Subject key identifier:   FB:D7:E3:46:CF:14:BC:F3:C2:96:1A:D5:1A:C0:85:59:6C:45:BC:39
Certificate issuer:       /CN=7afae497-a3f6-4f52-abeb-632cca8db94a
Certificate serial:       010D0C9F43285847FC7F9885D336A11FBB866E40
Authority key identifier: 4C:82:BD:2B:3F:94:20:83:FF:E4:68:4E:63:B7:64:55:C2:CB:79:A4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7afae497-a3f6-4f52-abeb-632cca8db94a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7afae497-a3f6-4f52-abeb-632cca8db94a/9916c0f3-dcb9-3d6b-b1d1-bd73c842be2e.roa
Signing time:             Sun 24 Nov 2024 14:00:39 +0000
ROA not before:           Sun 24 Nov 2024 14:00:39 +0000
ROA not after:            Sat 22 Feb 2025 14:00:39 +0000
asID:                     7029
IP address blocks:        2606:40c0::/29 maxlen: 29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:fc:7f:98:85:d3:36:a1:1f:bb:86:6e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afae497-a3f6-4f52-abeb-632cca8db94a
        Validity
            Not Before: Nov 24 14:00:39 2024 GMT
            Not After : Feb 22 14:00:39 2025 GMT
        Subject: CN=ee994d7d-6948-4844-b818-5275a5d74cf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ab:93:aa:08:77:db:a7:7d:2b:89:f5:a7:4c:
                    29:7e:46:36:fc:48:80:d0:3e:39:cd:74:d3:64:2a:
                    9f:92:c6:e8:11:76:08:5f:ce:ae:75:14:b0:6b:23:
                    60:d3:98:a3:ea:cd:e8:b7:96:f0:28:93:ce:1d:af:
                    d7:14:6c:64:98:24:37:0d:9a:07:a6:5c:de:ac:06:
                    47:dd:c2:35:6c:74:6b:d3:01:b9:f8:54:32:7d:cc:
                    07:4b:be:fc:f0:a8:68:2d:86:83:8f:d9:6f:19:38:
                    5f:39:76:4b:e5:12:41:0a:62:cd:6d:6e:4b:d0:ee:
                    ba:3d:f6:93:e5:cc:ad:a5:69:64:75:52:7b:51:e4:
                    54:cb:c7:5e:1a:d3:f0:8f:ad:14:86:51:63:50:6f:
                    bd:3b:e2:94:68:b6:59:11:97:97:17:27:6c:d1:35:
                    3a:d5:aa:36:1f:40:ab:bc:c9:b8:9f:cf:57:65:58:
                    02:7d:a2:c6:15:4a:09:dc:70:67:ab:7c:c1:64:4d:
                    50:8e:22:50:91:f4:c6:22:5b:76:21:01:b0:96:d3:
                    8e:77:89:97:65:67:5d:90:d6:c8:85:ea:13:dc:04:
                    ed:ba:42:86:bd:79:0a:38:da:b9:0a:c7:49:92:7e:
                    8f:71:97:cb:8d:a5:d7:58:7a:f0:9d:f3:39:67:91:
                    9b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:D7:E3:46:CF:14:BC:F3:C2:96:1A:D5:1A:C0:85:59:6C:45:BC:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7afae497-a3f6-4f52-abeb-632cca8db94a/9916c0f3-dcb9-3d6b-b1d1-bd73c842be2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7afae497-a3f6-4f52-abeb-632cca8db94a/7afae497-a3f6-4f52-abeb-632cca8db94a.crl

            X509v3 Authority Key Identifier:
                keyid:4C:82:BD:2B:3F:94:20:83:FF:E4:68:4E:63:B7:64:55:C2:CB:79:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7afae497-a3f6-4f52-abeb-632cca8db94a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:40c0::/29

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:06:a6:f5:24:0d:ac:26:1d:e5:b9:5f:4c:24:c5:02:24:2b:
         fd:4b:f6:2b:15:e6:b4:31:a4:9d:52:bc:df:f2:4b:e2:51:ba:
         15:86:06:b2:14:66:a7:a4:49:7f:2d:68:0e:6b:0e:2d:86:da:
         1d:33:dc:5b:22:23:78:e6:02:8f:cf:64:d8:57:46:d8:c0:f1:
         63:6a:77:df:f2:c1:68:f7:65:02:40:2c:eb:f4:f8:b1:90:64:
         fc:6f:53:0c:e9:96:c1:28:7e:2d:68:b6:f1:17:36:70:47:9f:
         3e:64:54:16:46:13:28:d2:6c:c3:67:16:8d:12:23:5c:57:1c:
         24:ad:5c:6e:93:af:f9:5a:ce:4d:ea:d1:f7:03:f0:81:ee:c1:
         a9:2f:12:ca:8e:63:e6:16:ea:ac:ec:67:78:7f:fb:1c:4b:bd:
         98:86:51:7b:0f:53:66:37:7a:0c:9e:26:33:b1:f6:b9:dd:a6:
         85:67:df:d4:aa:73:ae:26:fc:7d:3c:ca:4f:3e:d0:97:e9:6e:
         47:e5:0c:85:43:bb:cf:16:93:2b:5c:3b:68:ca:92:2c:6b:fb:
         1d:3a:11:2a:a1:a9:3a:79:b7:c0:c4:87:4d:32:f3:82:2d:0e:
         5f:9d:3f:6d:4e:fe:3b:8d:a4:35:dd:87:43:27:6e:17:e7:78:
         bc:58:82:45
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEf8f5iF0zahH7uGbkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2FmYWU0OTctYTNmNi00ZjUyLWFiZWItNjMyY2NhOGRi
OTRhMB4XDTI0MTEyNDE0MDAzOVoXDTI1MDIyMjE0MDAzOVowLzEtMCsGA1UEAxMk
ZWU5OTRkN2QtNjk0OC00ODQ0LWI4MTgtNTI3NWE1ZDc0Y2Y4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0quTqgh326d9K4n1p0wpfkY2/EiA0D45zXTT
ZCqfksboEXYIX86udRSwayNg05ij6s3ot5bwKJPOHa/XFGxkmCQ3DZoHplzerAZH
3cI1bHRr0wG5+FQyfcwHS7788KhoLYaDj9lvGThfOXZL5RJBCmLNbW5L0O66PfaT
5cytpWlkdVJ7UeRUy8deGtPwj60UhlFjUG+9O+KUaLZZEZeXFyds0TU61ao2H0Cr
vMm4n89XZVgCfaLGFUoJ3HBnq3zBZE1QjiJQkfTGIlt2IQGwltOOd4mXZWddkNbI
heoT3ATtukKGvXkKONq5CsdJkn6PcZfLjaXXWHrwnfM5Z5GbZQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFPvX40bPFLzzwpYa1RrAhVlsRbw5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83YWZh
ZTQ5Ny1hM2Y2LTRmNTItYWJlYi02MzJjY2E4ZGI5NGEvOTkxNmMwZjMtZGNiOS0z
ZDZiLWIxZDEtYmQ3M2M4NDJiZTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvN2FmYWU0OTctYTNmNi00ZjUyLWFi
ZWItNjMyY2NhOGRiOTRhLzdhZmFlNDk3LWEzZjYtNGY1Mi1hYmViLTYzMmNjYThk
Yjk0YS5jcmwwHwYDVR0jBBgwFoAUTIK9Kz+UIIP/5GhOY7dkVcLLeaQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83YWZhZTQ5Ny1hM2Y2LTRmNTItYWJlYi02MzJj
Y2E4ZGI5NGEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDJgZAwDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAqBqb1JA2sJh3luV9MJMUCJCv9S/YrFea0MaSdUrzf8kviUboVhgay
FGanpEl/LWgOaw4thtodM9xbIiN45gKPz2TYV0bYwPFjanff8sFo92UCQCzr9Pix
kGT8b1MM6ZbBKH4taLbxFzZwR58+ZFQWRhMo0mzDZxaNEiNcVxwkrVxuk6/5Ws5N
6tH3A/CB7sGpLxLKjmPmFuqs7Gd4f/scS72YhlF7D1NmN3oMniYzsfa53aaFZ9/U
qnOuJvx9PMpPPtCX6W5H5QyFQ7vPFpMrXDtoypIsa/sdOhEqoak6ebfAxIdNMvOC
LQ5fnT9tTv47jaQ13YdDJ24X53i8WIJF
-----END CERTIFICATE-----
Generated at Sat Apr 26 04:59:37 2025 by rpki-client